d24a990515671a4ad0bdd8b3eb03d4499ea68d370a9831c0a74e4f608bcc1155 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d24a990515671a4ad0bdd8b3eb03d4499ea68d370a9831c0a74e4f608bcc1155
Size

771KB
Sample

240222-c39a7aaf71
MD5

ff87f9f01ddfa4fa313630a867002915
SHA1

767975c0ab3f9b7594c4c8db92777fec4c114408
SHA256

d24a990515671a4ad0bdd8b3eb03d4499ea68d370a9831c0a74e4f608bcc1155
SHA512

66dbd32679116c30e29f12ee80edd4557448bed59ac4ebb4ffd8d0886b828b5a75913e336b238fe5facc21439ae45d9a00fa8bce288c4a09b1aef28bc4bd8c1a
SSDEEP

12288:U761vvrXBDZZmDmSh7SHSjX4z4ZV4kzI6OcGfAkx4tOF6j+Z:U7qvrXo7ZNX4z4YbcGfAkx4tNE

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  d24a990515671a4ad0bdd8b3eb03d4499ea68d370a9831c0a74e4f608bcc1155
- Size
  
  771KB
- MD5
  
  ff87f9f01ddfa4fa313630a867002915
- SHA1
  
  767975c0ab3f9b7594c4c8db92777fec4c114408
- SHA256
  
  d24a990515671a4ad0bdd8b3eb03d4499ea68d370a9831c0a74e4f608bcc1155
- SHA512
  
  66dbd32679116c30e29f12ee80edd4557448bed59ac4ebb4ffd8d0886b828b5a75913e336b238fe5facc21439ae45d9a00fa8bce288c4a09b1aef28bc4bd8c1a
- SSDEEP
  
  12288:U761vvrXBDZZmDmSh7SHSjX4z4ZV4kzI6OcGfAkx4tOF6j+Z:U7qvrXo7ZNX4z4YbcGfAkx4tNE
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Blocklisted process makes network request
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2